Your data rights
Data protection law gives you control over your personal data. This page explains the rights you may have under the UK GDPR and the EU GDPR, and how to use them with us.
Your rights
- Access. Ask whether we hold personal data about you and receive a copy.
- Correction. Ask us to fix data that is wrong or incomplete.
- Deletion. Ask us to erase your data where there is no good reason for us to keep it.
- Restriction. Ask us to pause our use of your data while a concern is looked into.
- Objection. Object to our use of your data where we rely on our legitimate interests.
- Portability. Ask for data you gave us in a commonly used, machine-readable format, where that applies.
- Complaint. Complain to a data protection authority at any time.
What we hold
Very little. The site has no forms or accounts, so in practice we hold only the emails people send us and the standard technical logs described in our Privacy policy.
How to make a request
Email [email protected] with the subject line “Data request” and say which right you wish to use. If we need to confirm that the request really comes from you, we will ask a reasonable question or two. We do not need a copy of your ID to answer a simple request, so please do not send one unless we ask.
How quickly we reply
We will respond within one month, as the law requires. If a request is complex we may need longer, and if so we will tell you why. We do not normally charge a fee.
Data held by the provider
If you registered on a provider's website, that company holds your registration, exam and payment data, not us. Please send those requests to the provider through its own website.
If you are not satisfied
You can complain to your local authority, such as the Information Commissioner's Office in the United Kingdom or the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania.